This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json) Hash identifier: QnBYfk7OfP1JshkJ3/Drk7ARkT75fY5U1GmPzxjMWwk= Subject key identifier: 9C:F0:F7:7D:B1:F9:31:0D:40:8B:01:65:F4:62:6F:01:CE:DB:6C:E5 Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98 Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398 Certificate serial: 019B378F322D2320CDE8B649D75AF72E8729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft Manifest number: 0534 Signing time: Fri 19 Dec 2025 17:01:29 +0000 Manifest this update: Fri 19 Dec 2025 17:01:29 +0000 Manifest next update: Sat 20 Dec 2025 17:01:29 +0000 Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: IH1J4v9EkXdPi/aaa/V+35rvjB49DuM8Qnf2l/T5fWg=) 2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:32:2d:23:20:cd:e8:b6:49:d7:5a:f7:2e:87:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398 Validity Not Before: Dec 19 17:01:29 2025 GMT Not After : Dec 20 17:01:29 2025 GMT Subject: CN=9cf0f77db1f9310d408b0165f4626f01cedb6ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:7c:eb:77:43:5d:76:06:02:63:d3:f5:91: 8b:6f:db:9e:9a:f5:36:29:ab:81:72:ff:70:7f:ec: 78:f6:5b:87:c0:fc:6b:20:07:b9:24:7e:8d:5c:07: 92:b7:b9:ad:bc:1b:42:4d:f3:9f:83:56:2f:53:d1: 4f:8e:48:f9:87:da:cc:b2:d6:0c:69:75:9d:95:e3: b1:2d:fd:46:c1:69:87:03:9f:aa:f6:58:04:99:68: 2e:71:9b:27:35:41:fa:44:aa:38:1f:42:db:0f:a6: 8c:28:49:3b:da:7c:ea:a5:66:3a:57:d7:2b:da:a7: f1:f6:f1:e2:dd:47:17:ef:41:70:56:5f:48:39:32: e2:ed:74:fe:cb:a5:82:40:3c:4b:3f:8f:18:5a:0e: 2c:09:15:77:09:2b:3c:c4:be:c0:15:a8:e2:cd:d4: 14:57:9e:da:fe:10:e1:be:b8:32:46:6f:5c:8a:d0: 63:c6:da:02:dd:15:21:7a:89:f2:9e:81:16:98:7a: b2:e0:dc:c2:99:45:a0:7a:cc:3c:87:b9:ad:9f:42: 20:c8:1d:8a:d0:b8:21:38:d5:ea:3d:83:6d:64:70: 7c:1f:13:55:75:e3:73:b6:30:82:d4:be:ac:c8:24: 30:a1:b6:25:f8:39:9c:b2:07:52:4c:66:fe:6a:7b: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F0:F7:7D:B1:F9:31:0D:40:8B:01:65:F4:62:6F:01:CE:DB:6C:E5 X509v3 Authority Key Identifier: keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7d:10:1f:46:0b:be:00:ed:9b:d1:9d:94:e7:c6:54:e8:bf: 71:f2:d2:06:26:71:79:0b:b3:d0:22:00:41:ac:f2:c8:75:b4: ad:fc:54:f6:72:0d:ee:9d:f1:a2:70:9d:c7:c5:31:57:91:8e: e5:f7:b8:6e:d4:3d:8b:d7:33:53:a9:95:2b:fa:29:ef:ca:ba: 7c:2e:86:77:38:4f:ca:57:7a:aa:11:93:df:e3:cb:4d:be:8b: b3:20:fe:fc:25:c7:30:6e:b9:d6:bc:c9:4e:c0:b6:e9:dd:e5: a4:c2:66:09:84:38:98:1c:17:44:6a:e9:34:5e:ff:8c:b3:48: 9f:04:02:33:af:bf:cc:62:e8:01:40:e1:52:ec:06:68:cf:63: 5a:12:1a:d7:d4:f9:36:8b:85:76:34:e6:cd:db:5f:3a:d1:af: e9:9f:70:cd:44:13:14:24:48:d2:fc:9d:20:96:6f:38:5a:72: a9:dd:a6:66:06:b5:c4:16:b1:f0:c8:5a:c2:9d:12:a8:c3:40: d0:8b:bb:4e:a7:6b:74:17:98:85:46:c5:a1:7c:b1:fd:08:59: 16:c5:e5:14:19:a0:57:65:ef:51:4f:50:cc:00:f4:b6:64:3d: cf:9b:00:46:4e:93:68:e4:7e:a2:f1:9d:db:fc:73:1b:e8:31: e4:c9:ba:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jzItIyDN6LZJ11r3LocpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy MGIzOTgwHhcNMjUxMjE5MTcwMTI5WhcNMjUxMjIwMTcwMTI5WjAzMTEwLwYDVQQD Eyg5Y2YwZjc3ZGIxZjkzMTBkNDA4YjAxNjVmNDYyNmYwMWNlZGI2Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKt863dDXXYGAmPT9ZGLb9uemvU2 KauBcv9wf+x49luHwPxrIAe5JH6NXAeSt7mtvBtCTfOfg1YvU9FPjkj5h9rMstYM aXWdleOxLf1GwWmHA5+q9lgEmWgucZsnNUH6RKo4H0LbD6aMKEk72nzqpWY6V9cr 2qfx9vHi3UcX70FwVl9IOTLi7XT+y6WCQDxLP48YWg4sCRV3CSs8xL7AFajizdQU V57a/hDhvrgyRm9citBjxtoC3RUheonynoEWmHqy4NzCmUWgesw8h7mtn0IgyB2K 0LghONXqPYNtZHB8HxNVdeNztjCC1L6syCQwobYl+DmcsgdSTGb+antAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzw932x+TENQIsBZfRibwHO22zlMB8GA1UdIwQY MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJH0QH0YL vgDtm9GdlOfGVOi/cfLSBiZxeQuz0CIAQazyyHW0rfxU9nIN7p3xonCdx8UxV5GO 5fe4btQ9i9czU6mVK/op78q6fC6GdzhPyld6qhGT3+PLTb6LsyD+/CXHMG651rzJ TsC26d3lpMJmCYQ4mBwXRGrpNF7/jLNInwQCM6+/zGLoAUDhUuwGaM9jWhIa19T5 NouFdjTmzdtfOtGv6Z9wzUQTFCRI0vydIJZvOFpyqd2mZga1xBax8Mhawp0SqMNA 0Iu7TqdrdBeYhUbFoXyx/QhZFsXlFBmgV2XvUU9QzAD0tmQ9z5sARk6TaOR+ovGd 2/xzG+gx5Mm6cw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:39:19 2025 by rpki-client